Assessments & Exercises Vice President - Cloud Resiliency Testing

Contribute to leading-edge security and resilience efforts, advancing protective strategies and propelling continuous improvement.

As an Assessments & Exercises Vice President - Cloud Resiliency Testing on the Cybersecurity and Tech Controls - Firm wide Technology Resiliency team, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies.

In addition, strengthen techniques to proactively identify risks and vulnerabilities in people, processes, and technology.

You will design and deploy risk-driven tests and simulations (or manage a highly-skilled team that does) and inform analysis to clearly outline root-causes.

In this role, you will evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management.

Job responsibilities


* Design and execute public cloud testing


* Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations to enhance the firm's public cloud assessment strategy and risk management


* Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation


* Partner across all lines of business and corporate functions within the firm to drive and deliver proactive, threat-informed testing, simulations, and assessments that validate readiness and drive down residual risk


* Ensure the firm's technology estate can maintain effective operations and support the ongoing, critical functioning of essential business services in an evolving threat landscape


* Collaborate closely with cross-functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement


* Provide public cloud subject matter expertise across the technology organization on resiliency programs and initiatives


* Engage with peers and industry groups that share threat intelligence analytics

Required qualifications, capabilities, and skills


* 5+ years of experience in resiliency or cybersecurity, with demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises


* Advanced in one or more technology areas (i.e., Cloud Enablement Design and Migration, Distributed technology, Data Replication, Messaging technology, and Application Security


* Knowledge of US financial services sector cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies


* Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risk...